Your message dated Fri, 21 Aug 2015 10:17:47 +0000 with message-id <e1zsjon-0007ed...@franck.debian.org> and subject line Bug#796103: fixed in conntrack 1:1.2.1-1+deb7u1 has caused the Debian Bug report #796103, regarding conntrack: CVE-2015-6496: conntrackd crash on unexpected network traffic to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 796103: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796103 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: conntrack Version: 1:1.4.2-2 Severity: grave Tags: security Please see http://www.openwall.com/lists/oss-security/2015/08/14/4 for details. Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: conntrack Source-Version: 1:1.2.1-1+deb7u1 We believe that the bug you reported is fixed in the latest version of conntrack, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 796...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <car...@debian.org> (supplier of updated conntrack package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 19 Aug 2015 16:54:23 +0200 Source: conntrack Binary: conntrack conntrackd Architecture: source amd64 Version: 1:1.2.1-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Alexander Wirt <formo...@debian.org> Changed-By: Salvatore Bonaccorso <car...@debian.org> Description: conntrack - Program to modify the conntrack tables conntrackd - Connection tracking daemon Closes: 796103 Changes: conntrack (1:1.2.1-1+deb7u1) wheezy-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2015-6496: conntrackd crash on unexpected network traffic (Closes: #796103) Checksums-Sha1: 50976558ee23d9cfdda3309c8017b9feaf466285 1874 conntrack_1.2.1-1+deb7u1.dsc bc077e67db1b4501b393bd41ab5f29fec9259d45 566085 conntrack_1.2.1.orig.tar.gz e1a52c789a1322cf6c3a15685a34c593c0852cc7 5861 conntrack_1.2.1-1+deb7u1.diff.gz 868d20584cb1b43c3eb8811a461d9ec9cff5ab27 27756 conntrack_1.2.1-1+deb7u1_amd64.deb a4e7c7df611d55bf8933967ac3f7616b768e4de8 125886 conntrackd_1.2.1-1+deb7u1_amd64.deb Checksums-Sha256: 69d00528124c1b9f09c9b429c95b32c36ebf7a4b1d5b4d2151e53c21c449bfd9 1874 conntrack_1.2.1-1+deb7u1.dsc 90cf7730b2b17acd17ce5f54b089498e283914c695e9b3102cd24103d3e35f55 566085 conntrack_1.2.1.orig.tar.gz 20ee5d5cf14e794075efbd64774547c230d856ceca4df0c68f49ca56e92f4a08 5861 conntrack_1.2.1-1+deb7u1.diff.gz db28759fd26a0169b760715c06c69aa927e42ed7e7ec9e5d691b2a40469811a3 27756 conntrack_1.2.1-1+deb7u1_amd64.deb 20a552aa56b37abba550d1505a79be0cfff2de2d06c1b04981f2fe89c4021ce6 125886 conntrackd_1.2.1-1+deb7u1_amd64.deb Files: 1ba8bff4b83e4f897bd5a52cce0062fc 1874 net optional conntrack_1.2.1-1+deb7u1.dsc fff6340c8bf845ca08ad534d2f9dd6c8 566085 net optional conntrack_1.2.1.orig.tar.gz 3208fea7c2e4828eb1ee2de4c80fc132 5861 net optional conntrack_1.2.1-1+deb7u1.diff.gz d6dfd7d6c3e648c608b9002b79521a25 27756 net optional conntrack_1.2.1-1+deb7u1_amd64.deb 229426053d8023ab15a09c7f1be5fa3f 125886 net optional conntrackd_1.2.1-1+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJV1NaaAAoJEAVMuPMTQ89ECQIP/0uznKUB+S/f7LoO4HtlQw95 QxDhR81qDB1VNWcc9Jtj8sUTkjAfYx04tLfpaPoSKo1K7soYq0s++Sr11UYiotuh YSNkhZNgK37fZHa7z/sIWGdm1WqUNUN0XhllrMjrDUnTRJVxaY91mCJPecaAXaCX nMTYQuKg8ouC1VjinPm1uAHAcjDhpUrC0s81yzPaYOKOAz3IMrq5Mdcumdu3yXTF nWDeiWjElYkCVlru18uY+wKfTYc97HOWuM4NmADH+ZQKE6LMgOD+NTjLCY+fueEp o+wQ1SUz8qVPwtCw3I5H/UIu/MQ8ylsJ1V44bSxPDvL9kFIugPBT6TkPwzxEnIQ0 CJ+SeOKcyv1NPx2n/dw2t0zUjoFAWPi+zqkMv4eBJ6DiDd87pKhgEHq2tgUW4Cix DjiVwWNE5p0QMG5v47PRjv7ZEhkaF7rcuUz7RQQjSOHZya+3Rw332JISdcOcyW/j /ZGg0c/lB999gEtS01uwnR4an661QrTqZCgVd9KaKHtnfbN8tzZSED5HRLEoBQy4 7+li/QRcmCpt/86ZpANNESkGyFXDjN1ECFXinglgxLu/XEfURCmGZu2sFuoZ+Mbw xvIwFH4xmjqB1N69rV1f9Zruw9wHIy3TePNh2GQQQ3PH6+6bglaWZKnHzAIO1+/f 64MyPJjEqsWcIiwI5I20 =Sz7K -----END PGP SIGNATURE-----
--- End Message ---
